Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
File:                     LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json)
Hash identifier:          8cfOgBQLKvO6QVOAnilkOo/GuBVmed3oMGhrb0y/f/8=
Subject key identifier:   09:EC:0E:E8:87:A7:1B:D8:FF:B0:22:BE:83:A5:39:F4:7A:07:3B:69
Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
Certificate issuer:       /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
Manifest number:          82
Signing time:             Wed 03 Sep 2025 07:17:46 +0000
Manifest this update:     Wed 03 Sep 2025 07:17:46 +0000
Manifest next update:     Wed 10 Sep 2025 07:17:46 +0000
Files and hashes:         1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: bKDha90zSIZT2X1QsbsUzmKEwKHFfge+LKbQlS96QoQ=)
                          2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: kwAnzY8sy28GuHuTAHp4dfauwLru447J5nFlWPhA168=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
                          rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 07:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
        Validity
            Not Before: Sep  3 07:17:46 2025 GMT
            Not After : Sep 10 07:17:46 2025 GMT
        Subject: CN=68b7eb9a-ffe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:e4:78:47:c3:28:4b:30:9a:a7:a3:48:73:
                    b8:d0:bd:31:84:59:c9:ee:5b:54:8c:85:49:87:db:
                    5b:df:e3:0f:29:68:78:0b:73:08:0d:49:0c:6a:f2:
                    6a:0b:4c:81:db:a3:21:0c:02:a2:7b:d9:7f:bb:c9:
                    46:db:6d:05:bd:73:39:8e:5f:aa:64:66:c1:49:37:
                    11:57:91:ec:f7:5b:16:21:da:b2:9e:d1:3b:81:ab:
                    04:9e:1f:d3:04:74:21:2d:30:80:4c:01:44:8a:33:
                    bc:73:5b:2c:79:23:8c:47:d3:20:38:fd:57:33:4d:
                    f8:73:35:44:60:15:25:ff:a3:c5:fd:42:de:7f:14:
                    cc:1f:61:3b:eb:a3:7a:4e:e5:be:46:5e:8d:19:33:
                    dd:07:84:ea:68:d4:fb:3c:bf:2e:2c:e6:fa:93:30:
                    52:7b:9b:26:f8:7c:fe:55:2d:b8:3b:c2:82:fc:4f:
                    75:1c:c7:a7:21:16:44:47:28:22:d0:9f:9e:77:b1:
                    e6:ca:70:38:31:d2:ef:50:2c:52:fa:63:5b:97:ad:
                    15:4a:21:39:86:eb:bf:29:c7:b2:0d:7e:41:90:5f:
                    16:17:ac:2a:37:8a:8f:52:89:0d:49:d2:6a:d2:ea:
                    a1:06:e6:22:c3:d3:bf:37:86:92:e6:8c:5c:bb:44:
                    b5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EC:0E:E8:87:A7:1B:D8:FF:B0:22:BE:83:A5:39:F4:7A:07:3B:69
            X509v3 Authority Key Identifier:
                keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:03:d2:18:8b:10:ea:c1:37:c4:ae:79:87:90:8f:f3:47:27:
         0c:dc:57:fd:e5:29:93:38:31:7f:6c:aa:dc:d6:e5:5d:63:3c:
         ef:8d:ba:04:9a:4f:9d:71:8b:4f:f7:66:30:5a:3d:89:79:5a:
         7b:3a:7d:c7:3e:2f:3a:8e:a0:ee:af:03:16:a6:bc:35:ff:f3:
         d1:e6:ae:55:62:9f:ef:66:d4:b0:5f:a5:c6:37:f4:49:da:3b:
         8c:99:d4:96:90:61:75:48:04:fa:9f:f3:a0:77:f3:55:a7:45:
         4c:8f:e0:e8:fb:0b:3a:d5:e4:c9:68:b2:fe:ea:3c:70:15:cf:
         f1:fa:7f:ca:03:75:40:f5:6c:19:4d:54:4e:b6:62:ca:fe:56:
         dc:7b:09:cb:29:8e:45:2f:8b:1d:5c:e4:60:af:df:f0:3b:c2:
         07:1b:7c:85:9d:66:94:f1:fa:71:22:4f:9f:01:27:bb:1a:c4:
         9d:7a:20:6b:3f:81:06:6c:e0:59:a3:c3:86:eb:62:e5:c1:b7:
         41:91:1d:c7:d4:dc:af:43:22:df:c3:c5:aa:e0:75:39:88:36:
         db:f5:e1:10:a0:d3:4a:68:16:de:4b:fe:4e:be:ea:d0:05:72:
         a3:f4:e8:a7:b4:24:2a:19:59:73:75:00:9e:45:b7:cb:01:29:
         eb:36:f0:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYyMDcxMTAvBgNVBAUTKDJEMjIzQjU2RUQ0RDE3QTgxNzhGRTlGQzYzRTM4MDFB
OTNCNUExRDMwHhcNMjUwOTAzMDcxNzQ2WhcNMjUwOTEwMDcxNzQ2WjAYMRYwFAYD
VQQDEw02OGI3ZWI5YS1mZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcbkeEfDKEswmqejSHO40L0xhFnJ7ltUjIVJh9tb3+MPKWh4C3MIDUkMavJq
C0yB26MhDAKie9l/u8lG220FvXM5jl+qZGbBSTcRV5Hs91sWIdqyntE7gasEnh/T
BHQhLTCATAFEijO8c1sseSOMR9MgOP1XM034czVEYBUl/6PF/ULefxTMH2E766N6
TuW+Rl6NGTPdB4TqaNT7PL8uLOb6kzBSe5sm+Hz+VS24O8KC/E91HMenIRZERygi
0J+ed7HmynA4MdLvUCxS+mNbl60VSiE5huu/KceyDX5BkF8WF6wqN4qPUokNSdJq
0uqhBuYiw9O/N4aS5oxcu0S1qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnsDuiH
pxvY/7AivoOlOfR6BztpMB8GA1UdIwQYMBaAFC0iO1btTReoF4/p/GPjgBqTtaHT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjIwNy9BQ0IwNjg1RUMy
MjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2Z1hqLW44WS1PQUdwTzFv
ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9kTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjIwNy9BQ0IwNjg1RUMyMjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2
Z1hqLW44WS1PQUdwTzFvZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZA9IYixDqwTfErnmHkI/zRycM3Ff95SmTODF/bKrc1uVdYzzvjboE
mk+dcYtP92YwWj2JeVp7On3HPi86jqDurwMWprw1//PR5q5VYp/vZtSwX6XGN/RJ
2juMmdSWkGF1SAT6n/Ogd/NVp0VMj+Do+ws61eTJaLL+6jxwFc/x+n/KA3VA9WwZ
TVROtmLK/lbcewnLKY5FL4sdXORgr9/wO8IHG3yFnWaU8fpxIk+fASe7GsSdeiBr
P4EGbOBZo8OG62LlwbdBkR3H1NyvQyLfw8Wq4HU5iDbb9eEQoNNKaBbeS/5OvurQ
BXKj9OintCQqGVlzdQCeRbfLASnrNvBG
-----END CERTIFICATE-----
Generated at Thu Sep 4 14:19:49 2025 by rpki-client